diff options
author | Jens Axboe <jaxboe@fusionio.com> | 2010-11-10 14:36:25 +0100 |
---|---|---|
committer | Jens Axboe <jaxboe@fusionio.com> | 2010-11-10 14:40:43 +0100 |
commit | cb4644cac4a2797afc847e6c92736664d4b0ea34 (patch) | |
tree | 14170d74d5040be49af14b484f252d888141a99f /block/ioctl.c | |
parent | f3f63c1c28bc861a931fac283b5bc3585efb8967 (diff) |
bio: take care not overflow page count when mapping/copying user data
If the iovec is being set up in a way that causes uaddr + PAGE_SIZE
to overflow, we could end up attempting to map a huge number of
pages. Check for this invalid input type.
Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>
Diffstat (limited to 'block/ioctl.c')
0 files changed, 0 insertions, 0 deletions